NEWS
PARASITES
SOFTWARE
FORUM
DIRECTORY

 
 
 
 
 
 
  

Remove XP Antivirus Pro 2010. Description and removal instructions

 
Title: XP Antivirus Pro 2010
 Also known as: XPAntivirusPro 2010, XPAntivirusPro2010
Type: Spyware
Severity scale:XP Antivirus Pro 2010 severity is 69  (69 / 100)
 
XP Antivirus Pro 2010 (also can be met as XP Antivirus Pro) is a rogue anti-spyware application. It uses false scan results and fake security warnings in order to scare you into purchasing this bogus software. It states that your computer is infected with Trojans, adware or malware and that you should purchase XP Antivirus Pro 2010 to remove the infections that of course don't even exist. This parasite is advertised through the use of Trojans. It's also promoted on various malicious websites. Once active, this parasite will ostensibly scan your computer and list various fake infections or security threats. It will also flood your computer with very annoying pop-ups and security alerts. One of such fake security alerts states:


XP Antivirus Pro 2010 Firewall Alert!
XP Antivirus Pro 2010 has blocked a program from accessing the Internet
Internet Explorer is infected with Trojan-BNK.Win32-Keylogger.gen
Private data can be stolen by third parties, including credit card details and passwords.


While running, XPAntivirusPro2010 loads fake system scanners. It displays exaggerated or false scan results with tons of worms, Trojans and other mawlare. As a solution for fixing everything and deleting all the infections, XP Antivirus Pro 2010 will ask you to pay for a "full" version of the program. However, wasting your money in such a way is not recommended! There's also another very annoying thing about this infection. It blocks legitimate anti-spyware and anti-virus software. Actually it blocks all executable files, so very likely you won't be able to launch even a notepad. Last, but not least, XPAntivirusPro 2010 will hijack Internet Explorer. It will display bogus websites and redirect you to the pay page of the rogue program. The removal guide written below will show you how to disable its restrictions and how to remove the rogue program for your PC.

XP Antivirus Pro 2010 removal instructions:

1. Click Start->Run (or WinKey+R). Input: "command". Press Enter or click OK.


2. Type "notepad" as shown in the image below and press Enter. Notepad will open.


3. Copy and past the following text into Notepad:


Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command]
[-HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command]
[-HKEY_CLASSES_ROOT\.exe\shell\open\command]

[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"

[-HKEY_CLASSES_ROOT\secfile]

4. Save file as "exefix.reg" (without quotation-marks) to your Desktop.
NOTE: choose Save as type: All files


5. Double-click to open exefix.reg. Click "Yes" for Registry Editor prompt window.

6. Download Spyware Doctor or an automatic removal tool below. Update Spyware Doctor and run a full system scan.

If you can't complete the above steps then please use another PC to download an automatic removal tool and exefix.reg (Right Click (Save Target As)) to download file. Copy these files to USB flash drive or any other external media and transfer them to infected computer. Launch exefix.reg file first and then install Spyware Doctor.

FORUM:
Discuss XP Antivirus Pro 2010 in
spyware removal forum

Related files: av.exe, WRblt8464P

XP Antivirus Pro 2010 properties:
• Changes browser settings
• Shows commercial adverts
• Stays resident in background

Automatic XP Antivirus Pro 2010 removal:

remover for XP Antivirus Pro 2010

XP Antivirus Pro 2010 manual removal:

Kill processes:
av.exe
HELP:
how to kill malicious processes

Delete registry values:
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\secfile
HKEY_CURRENT_USER\Software\Classes\secfile\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\secfile\shell
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\runas
HKEY_CURRENT_USER\Software\Classes\secfile\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = “”%AppData%\av.exe” /START “%1″ %*”
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = “”%1″ %*”
HKEY_CURRENT_USER\Software\Classes\.exe | @ = “secfile”
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = “application/x-msdownload”
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | @ = “”%AppData%\av.exe” /START “%1″ %*”
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | IsolatedCommand = “”%1″ %*”
HELP:
how to remove registry entries

Delete files:
%UserProfile%\\Local Settings\\Application Data\\av.exe %UserProfile%\\Local Settings\\Application Data\\WRblt8464P
HELP:
how to remove harmful files

Other programs to remove XP Antivirus Pro 2010:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 01/02/10
Information updated: 19/04/10

Additional resources related to XP Antivirus Pro 2010:

Attention: If you know or you have a website or page about XP Antivirus Pro 2010 removal, feel free to add a link to this list: add url



more resources

Post Comment:

Attention: Use this form only if you have additional information about XP Antivirus Pro 2010 parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:

1. by . 2010-04-19 04:04:30
version which got onto wifes laptop (lenovo 3000 c100) disables all menu items and progs will not run via commands!

2. by . 2010-04-14 21:04:31
the exefix.reg worked great thanks!! put it on a usb flash drive, ran it then was able to get mbam to work, thanks again, I thought I was going to have to format

3. by . 2010-04-06 02:04:20
Thanks so much! Worked like a charm

4. by NOT Happy. 2010-03-15 04:03:41
This does not work unless your prepared to buy the software. Another ploy to sell a software. It will scan for free but not fix it until you buy it. Wht falsly advertise that it will remove. It will block, that's it.

5. by . 2010-03-10 16:03:47
It worked great for me. I download the fix to a usb from another computer and the run it on the infected one, and that was it. Thanks a lot!

6. by . 2010-03-10 05:03:33
AHHH Same has happened to me my .exe files will not run!! how do I fix or undo this reg fix????

7. by . 2010-03-08 09:03:22
NEED HELP! When I saved the registry fix to the desktop, not thinking, I then RAN it from the desktop. Now, none of my .exe files will work! I can't even edit the registry, because "windows needs to know who created this file." Help, please! I screwed up royally!

8. by . 2010-03-03 07:03:16
I ran steps 1,2,3,4,and 5. But then I installed ESET, Now the Start menu is disabled, and I get some funky 'safe mode' type list asking me what program I want to run. Cannot get into System Restore.

9. by . 2010-02-28 09:02:00
Another way is System Restore!
But ty

10. by . 2010-02-28 00:02:08
When I try to merge the registry files I get the error message that it cannot import.....The specified file is not a registry script. You can only import binary registry files from within the registry editor.

11. by . 2010-02-26 17:02:13
This worked great. After registering, we rebooted and everything works fine now. Thanks!

12. by . 2010-02-26 07:02:15
Thank you!

13. by . 2010-02-25 12:02:06
This worked perfectly!

14. by Wingcmdr. 2010-02-13 22:02:23
thank you so much, that darn thing was starting to annoy the crud out of me lol, thank you
Latest spyware news:
Similar parasites:
Latest Spyware Threats: VirusProtect Pro | VirusLocker | SpyCrush | ContraVirus | SpyLocked | SpyDawn | AntiVerminser | SpywareQuake | VirusBurst | AntiVermins | AntiVermeans | Zlob | PopCorn.net | MovieLand | TagASaurus | BraveSentry | VirusBurster | SystemDoctor | VirusRescue | MalwareWipe | SpySheriff | CmdService | Smitfraud | SpywareStrike | WinFixer | WinHound | PestTrap | UnSpyPC
Agreement of Use | Privacy policy | Webmasters | Contact us | RSS Feeds
© 2001-2008 2-spyware.com All Rights Reserved. Reproduction in part or whole without written permission is prohibited. Powered by: eSolutions.